Benefit plan sponsors and plan fiduciaries should take note and act quickly – the Department of Labor (DOL) has issued a new cybersecurity guidance package with far-reaching effects and has already begun including this in its enforcement efforts.

Even in progressive organizations, network-based security practices still linger and they can lead to a dangerously flawed cloud strategy.

Sumo Logic research reports that 56% of companies with more than 10,000 employees receive more than 1,000 security alerts every day, and 93% say they cannot address all alerts the same day. Cybercriminals are also aware of alert fatigue and count on IT to ignore many security alerts.  So, what can you do? 

Four critical infrastructure organizations in a South East Asian country were targeted in an intelligence-gathering campaign that continued for several months, Symantec Threat Hunter Team has found. Among the organizations targeted were a water company, a power company, a communications company, and a defense organization, with evidence the attackers were interested in information about SCADA systems.

The latest Forrester Research report, Best Practices: Cloud Governance, gives cloud leaders a blueprint and best practices for cloud governance and accounts for stakeholders, workload targets, processes and tools.

In the past, passwords were the key to accessing systems and platforms, and they held much value as a security measure for businesses. But over time, the threat landscape has evolved, and weaknesses have been discovered in standard encryption methods that have diminished the password’s value.

Proofpoint, Inc. unveiled its annual Human Factor report, which provides a comprehensive examination of the three main facets of user risk—vulnerability, attacks, and privilege—and how the extraordinary events of 2020 transformed the current threat landscape.

A new Digital Shadows report reveals Initial Access Brokers (IABs) have consolidated their role in the cybercriminal landscape and have now become a central figure in the Ransomware-as-a-Service business model. 

CYBER.ORG announced the release of the first voluntary K-12 cybersecurity learning standards to be used in schools and districts around the country.

The volume of cyber intrusion activity globally jumped 125% in the first half of 2021 compared with the same period last year, according to the Cyber Investigations, Forensics & Response (CIFR) mid-year update from Accenture.